Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          Gzd31thZQ2qIzU3BWO8f+CvFqDajamPRgMiXNcEXK1c=
Subject key identifier:   BA:1E:86:B9:81:9E:EC:01:72:B2:79:8B:2D:E1:57:F8:D1:85:DC:FE
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01A0BFC30A95C356994BFCE0ADA1405C01AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0AF4
Signing time:             Sun 20 Sep 2026 17:00:25 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:25 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:25 +0000
Files and hashes:         1: 1-wxgSYN6azWWUrCaPDW7GpWeKi0.roa (hash: DPLds8jCOdoU+9WAoO0XaZ0zlPjKwpJ3akJ+Z80uiZg=)
                          2: Csd6m9ejO1JJZR6uqcgzHjzMB0s.roa (hash: 4OoKitHUM2Cxcji9pDEeODDzqXWMR+bJbVbOObsHghk=)
                          3: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=)
                          4: En3Wic9RJujoNZz1RHxUA6UVUfU.roa (hash: O63V4JVax87JCF0awcaxtenxRZPOPdz5hB0JKaX0syY=)
                          5: FAAYpnv0apJm1WMjsv3PVyWYHW8.roa (hash: cRkV53u9HMf3IlgE7VmUP+PB8n6IJtBSTpmDwitbqpg=)
                          6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: 0HzZbqCJUlsOn56WfoAk6lyX5krl+CjvC7k2ZrBylXk=)
                          7: KacNY2NRCZHAdOB1lxgrSlTUZlM.roa (hash: qllOkGGUcuSdb7HoAuEKwUiZ9/GJv0Ub2eGz8KFRmtE=)
                          8: KnBTzsN71pvNUURw9MTkeAuiWEg.roa (hash: f3UjJWYdOCKN/sjw9LsoQPTsRyO9pJv7bf7OHVWD29I=)
                          9: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=)
                          10: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=)
                          11: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=)
                          12: bqQbHCxttVzgxNcTF0tbCdJVJgI.roa (hash: 1MVaNJ/MdqSqtNMpFBgMNrwtevfOonhxXKKdjTutsOE=)
                          13: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=)
                          14: hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa (hash: l0oUAYvx1+pRIjX6Aa7SZOYLA8siUWlxjSjZBHxavhM=)
                          15: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=)
                          16: sJruewuKaSeVsdcx7O5wYrcqNzE.roa (hash: lXlw+sCAYn9qkIUAMBhvTHNQ6pkSMrMsj6GywXXUL9k=)
                          17: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=)
                          18: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=)
                          19: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=)
                          20: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c3:0a:95:c3:56:99:4b:fc:e0:ad:a1:40:5c:01:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Sep 20 17:00:25 2026 GMT
            Not After : Sep 21 17:00:25 2026 GMT
        Subject: CN=ba1e86b9819eec0172b2798b2de157f8d185dcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:dc:84:5f:7e:31:6d:7e:94:87:7c:88:a3:
                    ef:94:0b:20:c9:96:49:8e:3a:e4:1d:42:f4:a4:1d:
                    12:9e:f0:4e:04:49:1f:96:b5:f9:0e:94:c8:c5:0f:
                    5c:01:b1:53:24:4c:2b:25:1f:d9:2e:07:da:59:ce:
                    1c:a3:16:cf:74:16:d6:01:93:d9:5b:6b:b0:56:e1:
                    b4:ee:ee:cc:a3:32:1b:48:02:58:a2:5b:3f:50:ea:
                    86:fc:43:da:ad:2b:28:0e:64:02:ce:06:38:3c:a2:
                    b1:e0:35:a7:7e:4c:d1:1c:e5:00:df:a9:89:08:e5:
                    c8:b3:95:37:4d:06:52:df:c2:ac:01:68:7e:fe:f8:
                    68:5b:29:24:cb:61:0c:fb:e8:86:78:cc:e0:c5:16:
                    31:a6:7b:b8:50:f4:92:6a:5b:fb:a4:7b:7b:bc:df:
                    ad:79:6d:d0:6b:71:be:4d:7a:b0:22:6c:a0:dd:9a:
                    72:8b:57:fa:46:c8:bc:b8:83:d4:1b:0f:37:61:99:
                    cb:7b:85:07:fe:8b:1d:f4:2e:b8:25:f3:e6:3b:e2:
                    4e:94:97:c6:d3:0f:8c:e1:c6:9d:38:2a:3a:28:ef:
                    9d:88:78:76:55:92:f1:a3:b4:5d:be:60:53:a2:ea:
                    a8:2a:a5:12:b4:fb:65:b8:dc:67:a4:7d:4d:ce:6e:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1E:86:B9:81:9E:EC:01:72:B2:79:8B:2D:E1:57:F8:D1:85:DC:FE
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:88:b9:df:27:c5:b3:4c:4c:41:19:ad:97:43:1f:05:d4:c8:
         34:0e:b0:c8:59:ac:b8:fc:87:26:57:f0:07:ff:ba:86:d5:5c:
         c0:35:a0:18:0b:d2:23:09:51:b4:00:21:02:44:05:31:ce:b3:
         8e:f6:bb:20:68:a5:7a:28:19:17:8f:46:ec:a8:6c:bd:6c:97:
         b0:52:09:48:14:1c:15:69:5a:e6:d7:72:5c:77:8c:c6:37:1d:
         79:5a:a2:d0:66:da:06:81:87:cb:b7:b6:2a:a2:e0:e4:e4:b2:
         43:73:a9:53:6d:0e:2a:bf:cc:b6:0f:b3:15:2c:66:9c:05:e9:
         a8:1c:57:80:c3:b0:14:5d:a5:24:18:cd:f3:92:c0:98:35:52:
         71:02:97:7e:2c:81:d7:ca:0d:3a:84:f6:a0:d4:36:85:df:b5:
         1a:b7:27:6a:4c:4f:34:74:56:dd:55:e5:c5:52:57:d9:75:b0:
         0a:4e:0d:d9:6f:39:f6:a0:28:95:22:ca:99:ef:54:0d:35:23:
         05:2e:d9:81:32:6f:83:2e:cd:21:08:75:5c:73:cf:f0:0f:66:
         b3:6b:1c:6a:5b:5e:8c:f3:96:cf:8e:60:99:83:fb:51:ec:a5:
         ee:05:df:0a:c4:d4:06:ed:cd:2e:7a:5c:33:bc:9d:f4:e5:e9:
         7a:14:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:58:33 2026 by rpki-client